ThanatosXingYu/2026FastjsonPoC external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

ThanatosXingYu/2026FastjsonPoC

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/ThanatosXingYu/2026FastjsonPoC)

Close

ThanatosXingYu / 2026FastjsonPoCView on GitHubMore

• External links
• Readme badge

【已复现】Fastjson 1.2.66–1.2.83 JsonType 纯库一键 RCE（AutoType 关闭仍可利用；完整 RCE 需 JDK8 + Spring Boot LaunchedURLClassLoader）。仅限授权安全研究与本地防御验证。

☆90Jul 21, 2026Updated 3 months ago

Alternatives and similar repositories for 2026FastjsonPoC

Users that are interested in 2026FastjsonPoC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• dinosn / fastjson-jsontype-rce-lab

  View on GitHub
  Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fa…
  ☆207Jul 27, 2026Updated 3 months ago
• DmTomHL / fastjson-1.2.83-gadget-rce

  View on GitHub
  Fastjson 1.2.68 ~ 1.2.83 RCE，jdk8、17、21和25全版本，支持批量urls进行poc验证。
  ☆37Jul 21, 2026Updated 3 months ago
• neouks / veo

  View on GitHub
  指纹识别、目录扫描，支持主动和被动
  ☆221Jun 29, 2026Updated 4 months ago
• d0ctorsec / LearnJavaMemshellFromZero-Recurrence

  View on GitHub
  基于W01fh4cker大佬的LearnJavaMemshellFromZero从零掌握java内存马的复现重组版本。
  ☆97Jun 15, 2026Updated 4 months ago
• yuag / KubePivot

  View on GitHub
  KubePivot-容器渗透测试工具
  ☆13Jul 6, 2026Updated 4 months ago
• Simple, predictable pricing with DigitalOcean hosting • Ad
  Always know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
• goodlunatic / Docker-SymbolsMaker-vol3

  View on GitHub
  使用Docker一键制作vol3取证需要的的SymbolTables
  ☆12Aug 31, 2025Updated last year
• whitebear-ch / GeoServerExploit

  View on GitHub
  GeoServer（CVE-2024-36401/CVE-2024-36404）漏洞利用工具
  ☆123Jan 17, 2025Updated last year
• wooluo / nuclei-templates-2025hw

  View on GitHub
  自动生成nuclei 2025HW poc
  ☆129Jul 25, 2025Updated last year
• luelueking / nacos_hessian_rce_poc

  View on GitHub
  ☆23Jun 12, 2023Updated 3 years ago
• yhy0 / GodzillaSource

  View on GitHub
  哥斯拉源码-v3.03-godzilla
  ☆11May 12, 2022Updated 4 years ago
• d0ctorsec / WebGoatVulnerabilityRangeCodeAudit

  View on GitHub
  6万字奶爸级WebGoat8.X代码审计大全，全文均可复现，适合刚学完JAVASE准备开始代码审计的师傅🌟
  ☆171Jun 15, 2026Updated 4 months ago
• wa1ki0g / NoAuth

  View on GitHub
  java-web 自动化鉴权绕过
  ☆381Apr 3, 2025Updated last year
• MemShellParty / MemShellParty

  View on GitHub
  一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率
  ☆1,618Updated this week
• adeljck / YongYou-Exploit

  View on GitHub
  YongYou U8C deserialization file upload exploit tool targeting IPFxxFileService and IFileTrans services
  ☆28Sep 28, 2025Updated last year
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• Vme18000yuan / fastjson2Exp

  View on GitHub
  fastjson2 RCE Exp
  ☆20Jul 27, 2026Updated 3 months ago
• wgpsec / YongYouNcTool

  View on GitHub
  用友NC系列漏洞检测利用工具，支持一键检测、命令执行回显、文件落地、一键打入内存马、文件读取等
  ☆600Aug 19, 2023Updated 3 years ago
• damn77789 / nuclei-pocs

  View on GitHub
  test
  ☆19Jul 13, 2026Updated 3 months ago
• haochen1204 / python_hacktool_study

  View on GitHub
  ☆12Feb 13, 2022Updated 4 years ago
• ekkoo-z / KubeTrail

  View on GitHub
  KubeTrail（云迹） 是一个面向 Kubernetes 授权红队评估与防御验证的容器内态势感知、攻击面发现和 AI 辅助攻防编排工具
  ☆72Sep 17, 2026Updated last month
• abc123info / EquationToolsGUI

  View on GitHub
  本程序为美国NSA的方程式工具包图形界面版，由ABC_123于2017年开始编写，仅用来扫描和验证MS17-010、MS09-050、MS08-067漏洞，并可协助管理员修复系统漏洞。
  ☆573Jul 27, 2026Updated 3 months ago
• y1shiny1shin / KMBA

  View on GitHub
  Kill Memshell By Arthas. 基于Arthas的内存马查杀工具
  ☆36Oct 14, 2026Updated 3 weeks ago
• 0x7eTeam / fastjson-1.2.83-rce

  View on GitHub
  Fastjson 1.2.68 ~ 1.2.83 RCE
  ☆97Jul 27, 2026Updated 3 months ago
• SpringKill-team / CodeAuditAssistant

  View on GitHub
  🔍 CodeAuditAssistant - JetBrains Code Audit Plugin (Beta) ⚡ Deep Call-Chain Tracking | 🚀 Method/Class Search | 🔥 Prebuilt Vuln Sink…
  ☆779Mar 14, 2026Updated 7 months ago
• Wordpress hosting with auto-scaling - Free Trial Offer • Ad
  Fully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
• Ad1euDa1e / VueCrack

  View on GitHub
  红队浏览器插件-检测VUE站点未授权漏洞
  ☆954May 7, 2026Updated 6 months ago
• evilAdan0s / Cobalt-Strike-Develop-Note

  View on GitHub
  Cobalt Strike二次开发笔记，记录功能和思路
  ☆14Jul 9, 2022Updated 4 years ago
• Lserein / mcp-irt

  View on GitHub
  一个自动化的安全应急响应工具，支持远程主机的安全检查、威胁排查和响应处置，集成威胁情报分析和 AI 驱动的安全事件分析能力。
  ☆22Dec 20, 2025Updated 10 months ago
• Y4Sec-Team / mysql-jdbc-tricks

  View on GitHub
  JDBC Attack Tricks
  ☆155Sep 3, 2023Updated 3 years ago
• X1r0z / JNDIMap

  View on GitHub
  A powerful JNDI injection exploitation framework that supports RMI, LDAP and LDAPS protocols, including various bypass methods for high-v…
  ☆601May 4, 2026Updated 6 months ago
• veo / vagent

  View on GitHub
  多功能 java agent 内存马
  ☆527Oct 8, 2023Updated 3 years ago
• tarihub / blackjump

  View on GitHub
  JumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 / CVE-2023-42820 / RCE 2021
  ☆273Jun 6, 2025Updated last year
• CatXicure / GhostBitsGenerator

  View on GitHub
  ☆43Apr 29, 2026Updated 6 months ago
• ssrsec / JeecgBoot-offline-brute

  View on GitHub
  jeecg-boot密码离线爆破
  ☆110Nov 22, 2024Updated last year
• Virtual machines for every use case on DigitalOcean • Ad
  Get dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
• trymonoly / K8sPenTool

  View on GitHub
  一款针对K8s综合利用GUI工具
  ☆191Updated this week
• yulate / jdbc-tricks

  View on GitHub
  《深入JDBC安全：特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…
  ☆591Feb 7, 2026Updated 9 months ago
• ahisec / geoserver-

  View on GitHub
  geoserver CVE-2024-36401漏洞利用工具
  ☆45Jul 24, 2024Updated 2 years ago
• lemono0 / FastJsonParty

  View on GitHub
  FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用
  ☆1,250Jul 12, 2024Updated 2 years ago
• shiyeshu / GBitsTools

  View on GitHub
  Black Hat Asia 2026 Ghost Bits payload generate tools
  ☆65Apr 29, 2026Updated 6 months ago
• Just-Hack-For-Fun / OpenForensicRules

  View on GitHub
  一套标准化的数字取证与应急响应信息采集规则格式规范。
  ☆44Jul 9, 2025Updated last year
• Axyanzzzz / TongWebEJBExploit

  View on GitHub
  TongWebEJB漏洞利用工具
  ☆36Apr 24, 2026Updated 6 months ago